wptf-image-gallery 1.0.3 - Remote File Download

Plugin is still affected and has been closed. The ./wptf-image-gallery/lib-mbox/ajaxload.php code doesn't sanitize user input or check that a user is authorized to download files. This allows an unauthenticated user to download sensitive system files: 1 PoC $ curl...

wptf-image-gallery 1.0.3 - Remote File Download

Plugin is still affected and has been closed. The ./wptf-image-gallery/lib-mbox/ajaxload.php code doesn't sanitize user input or check that a user is authorized to download files. This allows an unauthenticated user to download sensitive system files: 1 $ curl...

WordPress WP-PowerPlayGallery 3.3 File Upload / SQL Injection

Title: Remote file upload vulnerability & SQLi in wordpress plugin wp-powerplaygallery v3.3 Author: Larry W. Cashdollar, @larry0 Date: 2015-06-27 Download Site: https://wordpress.org/plugins/wp-powerplaygallery Vendor: WP SlideShow Vendor Notified: 2015-06-29 Advisory:...

Audio Gallery Suite Local File Disclosure

Exploit Title: Audio-Gallery-Suite Local File Disclosure Vulnerability + Google Dork: inurl:/downloadengine.php?file= + Date: July/04/2015 + Exploit Author: IranianDarkCodersTeam + Vendor Homepage: http://robinrizvi.info + Software Link: https://github.com/robinrizvi/Audio-Gallery-Suite +...

Simple Image Gallery PRO, 3.0.7 and below, XSS (Cross Site Scripting)

Simple Image Gallery PRO plgcontentjwsigpro, 3.0.7 and below, XSS Cross Site Scripting...

Magnifica Webscripts Anima Gallery Directory Traversal Vulnerability

Magnifica Webscripts is a PHP image management system. Magnifica Webscripts Anima Gallery suffers from a directory traversal vulnerability due to the func.php function in the program failing to adequately filter the 'theme' and 'lang' cookie parameter, which allows remote attackers to obtain the...

Coppermine Photo Gallery Catalog Enumeration Vulnerability

Coppermine Photo Gallery is a web-based album management system. The Coppermine Photo Gallery minibrowser.php script fails to adequately filter the 'folder' parameter, allowing remote attackers to exploit a vulnerability to enumerate directories...

CVE-2015-3923

Coppermine Photo Gallery before 1.5.36 allows remote attackers to enumerate directories via a full path in the folder parameter to minibrowser.php...

Path traversal

Coppermine Photo Gallery before 1.5.36 allows remote attackers to enumerate directories via a full path in the folder parameter to minibrowser.php...

CVE-2015-3923

Coppermine Photo Gallery before 1.5.36 allows remote attackers to enumerate directories via a full path in the folder parameter to minibrowser.php...

CVE-2015-3923

Coppermine Photo Gallery (before 1.5.36) is vulnerable to directory enumeration via the folder parameter in minibrowser.php due to improper filtering, enabling remote attackers to traverse directories. The affected component is Coppermine Photo Gallery, minibrowser.php, with a path traversal issu...

Directory traversal

Multiple directory traversal vulnerabilities in func.php in Magnifica Webscripts Anima Gallery 2.6 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 theme or 2 lang cookie parameter to AnimaGallery/...

CVE-2015-4415

The provided connected sources confirm CVE-2015-4415 affects Magnifica Webscripts Anima Gallery 2.6, specifically the func.php component. The vulnerability is a directory traversal flaw that allows remote attackers to include and execute arbitrary local files by manipulating the theme or lang coo...

Maian Gallery Multiple Vulnerabilities

Maian Gallery is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SanyBee Gallery 0.2.9 / 0.2.10 XSS / Add Admin

| Title : SanyBee Gallery V0.2.9 and v0.2.10 special Multi Vulnerability | Author : indoushka | email : [email protected] | Dork : SanyBee Gallery Version : 0.2.9 special free.fr | Tested on: windows 8.1 Français V.Pro | Download : http://www.gallery.sanybee.com...

Anima Gallery Multiple Vulnerabilities

Anima Gallery is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Maian Gallery 2.0 SQL Injection / Header Injection

| Title : Maian Gallery v2.0 Mulllti Vulnerability | Author : indoushka | email : [email protected] | Dork : Maian Gallery v2.0. Copyright © 2006-2015 Maian Script World. All Rights Reserved | Tested on: Win 8.1 fr pro / 21:58 15/05/2015 | Bug : Mulllti | Download :...

CVE-2015-4133

Unrestricted file upload vulnerability in admin/scripts/FileUploader/php.php in the ReFlex Gallery plugin before 3.1.4 for WordPress allows remote attackers to execute arbitrary PHP code by uploading a file with a PHP extension, then accessing it via a direct request to the file in uploads/...

CVE-2015-4133

Unrestricted file upload vulnerability in admin/scripts/FileUploader/php.php in the ReFlex Gallery plugin before 3.1.4 for WordPress allows remote attackers to execute arbitrary PHP code by uploading a file with a PHP extension, then accessing it via a direct request to the file in uploads/...

CVE-2015-4133

CVE-2015-4133 concerns the ReFlex Gallery WordPress plugin (affected version: before 3.1.4). The issue is an unrestricted file upload in admin/scripts/FileUploader/php.php, allowing an attacker to upload a PHP file and access it via uploads/ to execute arbitrary code remotely. The root cause is i...